Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: Mm2gzHhOwHRk+NfAItlRC1MjnMFfRV3n4Yeprn3xX7g=
Subject key identifier: 51:13:2D:7F:38:6C:56:2A:6F:91:67:2F:E9:CD:4A:60:42:A7:23:00
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 0198D66107A99DAFC02550EEED0E32D5A14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: BYqMm708DoUe8pP3WT5o5HHHjBnEHmzzxPX3YRyZH1I=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:07:a9:9d:af:c0:25:50:ee:ed:0e:32:d5:a1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=51132d7f386c562a6f91672fe9cd4a6042a72300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:c9:d0:d0:de:f5:8e:12:e5:09:23:f5:d5:
3d:56:9c:31:f9:c6:f5:ad:be:0e:ad:eb:0d:2b:21:
77:45:dd:9a:7f:80:5b:25:18:b6:64:5e:6b:23:d2:
15:94:fe:8b:fb:00:81:50:69:a6:73:74:81:fd:2b:
17:86:59:85:48:b2:ea:b1:0f:00:2a:6a:65:f9:59:
cf:b7:01:6c:f6:57:b7:4a:f1:0d:ef:f7:5f:2f:c8:
f8:f0:89:29:f1:10:8a:8d:59:ca:37:f5:e2:a4:67:
e0:70:9a:fa:8c:32:76:e1:9a:12:83:8e:de:8a:d3:
a8:da:fd:b9:1e:2b:4b:78:e2:a1:14:0e:48:4b:af:
dc:22:1a:10:ce:19:5b:4a:b8:a0:83:1c:ee:52:90:
cd:14:59:db:f6:8a:00:79:db:f7:83:e0:0f:db:87:
11:a4:3c:31:0f:cc:a9:0d:1b:18:3e:f5:31:17:fa:
9c:9e:05:11:40:a8:89:ae:c4:5e:6b:34:f2:52:e0:
f9:5f:12:63:b2:6e:79:11:6c:ef:38:b6:d6:39:fb:
9b:df:01:03:4a:65:19:2e:7a:d8:51:99:0a:56:e1:
ab:ad:94:5b:56:92:ac:20:a0:88:f6:21:0e:79:3c:
bc:86:f9:b0:e6:5f:44:53:92:1f:c1:9e:55:6e:67:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:13:2D:7F:38:6C:56:2A:6F:91:67:2F:E9:CD:4A:60:42:A7:23:00
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:31:0a:14:88:fa:93:0b:ea:1c:3f:b2:2c:81:25:b3:51:b2:
4b:90:3d:b7:96:74:26:d7:b4:06:1b:eb:33:eb:e9:52:73:3a:
04:0e:06:45:4e:03:77:e5:15:85:a1:68:59:e9:5c:df:dd:9a:
d4:27:21:fd:24:5f:51:db:cf:4d:82:ff:3d:47:fa:ff:7c:7b:
58:1c:fe:a5:af:34:32:2b:cb:a1:77:21:2a:50:11:eb:46:4e:
79:9e:62:69:44:76:85:75:ea:00:73:3c:70:f2:07:df:59:88:
93:2c:3b:8c:ae:c2:22:ee:f2:64:91:95:7e:34:df:40:9a:46:
db:61:78:91:bc:27:e4:df:5c:28:08:0c:54:59:44:92:a4:70:
bd:12:7d:5d:cc:d9:34:96:4c:28:fd:53:80:14:19:f0:1b:37:
c2:16:03:b0:67:ac:ab:34:b6:77:bb:6b:62:47:f5:74:37:bc:
3d:2e:c2:93:34:d6:e2:db:5e:8e:d7:fe:18:70:2c:80:c5:ec:
ae:14:7d:f0:5e:84:5a:39:46:bd:d5:74:44:62:35:4b:ae:3f:
78:63:15:2b:60:0d:91:ff:de:74:73:cf:39:c9:1d:cd:ca:0f:
d2:34:96:4f:64:b5:44:2d:27:26:12:64:33:53:a7:ee:25:17:
1d:7f:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:04 2025 by rpki-client